CVSS: 5.1EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10807 – PHPGurukul Hospital Management System search.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-10807
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. • https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(search.php).md https://phpgurukul.com https://vuldb.com/?ctiid.283031 https://vuldb.com/?id.283031 https://vuldb.com/?submit.436551 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-707: Improper Neutralization •
CVSS: 5.1EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10806 – PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-10806
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be initiated remotely. • https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(betweendates-detailsreports.php).md https://phpgurukul.com https://vuldb.com/?ctiid.283030 https://vuldb.com/?id.283030 https://vuldb.com/?submit.436547 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-707: Improper Neutralization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10768 – PHPGurukul Online Shopping Portal two_tables.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-10768
A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(two_tables.php).md https://phpgurukul.com https://vuldb.com/?ctiid.282988 https://vuldb.com/?id.282988 https://vuldb.com/?submit.436531 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-707: Improper Neutralization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10757 – PHPGurukul Online Shopping Portal js_data.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-10757
A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(js_data.php).md https://phpgurukul.com https://vuldb.com/?ctiid.282926 https://vuldb.com/?id.282926 https://vuldb.com/?submit.436391 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10756 – PHPGurukul Online Shopping Portal html_table.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-10756
A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/html_table.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(html_table.php).md https://phpgurukul.com https://vuldb.com/?ctiid.282925 https://vuldb.com/?id.282925 https://vuldb.com/?submit.436381 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •